SSL connection between Apache and Tomcat failing

"Emsley, I (Iain)" <[email protected]> Fri, 17 Jul 2009 13:56:23 +0100
Newsgroups gmane.comp.apache.mod-ssl.user
Message-ID <F93ED76B6830FB4CB81262937940F72602C8789D@exchange11.fed.cclrc.ac.uk>
This is a multi-part message in MIME format.

------_=_NextPart_001_01CA06DD.FCE1EBC2
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

I've got a website which uses Apache 2.2 as the front end with Tomcat
5.5.23 as the backend and am using mod_ssl and mod_proxy to link to the
two together in Windows server 2003. Normally there isn't an issue with
two servers serving the website but recently (and mainly with , it
appears, mobile browsers), I'm getting the following errors:

i Jul 17 09:52:29 2009] [debug] ssl_engine_kernel.c(1760): OpenSSL:
Loop: SSLv3 read finished A

[Fri Jul 17 09:52:29 2009] [debug] ssl_engine_kernel.c(1756): OpenSSL:
Handshake: done

[Fri Jul 17 09:52:29 2009] [info] Connection: Client IP: 130.246.76.83,
Protocol: TLSv1, Cipher: DHE-RSA-AES256-SHA (256/256 bits)

[Fri Jul 17 09:52:29 2009] [debug] ssl_engine_io.c(1817): OpenSSL: read
5/5 bytes from BIO#7d0ad8 [mem: 4a3aaa8] (BIO dump follows)

[Fri Jul 17 09:52:29 2009] [debug] ssl_engine_io.c(1750):
+-----------------------------------------------------------------------
--+

Dump details                                   .....            |

[Fri Jul 17 09:52:29 2009] [debug] ssl_engine_io.c(1795):
+-----------------------------------------------------------------------
--+

[Fri Jul 17 09:52:29 2009] [debug] ssl_engine_io.c(1817): OpenSSL: read
992/992 bytes from BIO#7d0ad8 [mem: 4a3aaad] (BIO dump follows)

[Fri Jul 17 09:52:29 2009] [debug] ssl_engine_io.c(1750):
+-----------------------------------------------------------------------
--+

Dump details

 [Fri Jul 17 09:52:29 2009] [debug] ssl_engine_io.c(1795):
+-----------------------------------------------------------------------
--+

[Fri Jul 17 09:52:29 2009] [info] Initial (No.1) HTTPS request received
for child 245 (server dev.jiscmail.ac.uk:443)

[Fri Jul 17 09:52:35 2009] [debug] ssl_engine_io.c(1828): OpenSSL: I/O
error, 5 bytes expected to read on BIO#73e708 [mem: 4a169e0]

[Fri Jul 17 09:52:35 2009] [info] [client 130.246.76.83] (OS 10060)A
connection attempt failed because the connected party did not properly
respond after a period of time, or established connection failed because
connected host has failed to respond.  : SSL input filter read failed.

[Fri Jul 17 09:52:35 2009] [debug] ssl_engine_kernel.c(1770): OpenSSL:
Write: SSL negotiation finished successfully

=20

I'd be grateful for any pointers in getting to the root of this issue
(or ruling out mod_ssl issues).=20

=20

Thanks,=20

=20

Iain


-- =0AScanned by iCritical.=0A

------_=_NextPart_001_01CA06DD.FCE1EBC2
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)">
<style>
<!--
 /* Font Definitions */
 @font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;}
@page Section1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.Section1
	{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
 <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
 <o:shapelayout v:ext=3D"edit">
  <o:idmap v:ext=3D"edit" data=3D"1" />
 </o:shapelayout></xml><![endif]-->
</head>

<body lang=3DEN-GB link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

<p class=3DMsoNormal>I&#8217;ve got a website which uses Apache 2.2 as =
the front
end with Tomcat 5.5.23 as the backend and am using mod_ssl and mod_proxy =
to
link to the two together in Windows server 2003. Normally there =
isn&#8217;t an
issue with two servers serving the website but recently (and mainly with =
, it appears,
mobile browsers), I&#8217;m getting the following errors:<o:p></o:p></p>

<p class=3DMsoNormal>i Jul 17 09:52:29 2009] [debug] =
ssl_engine_kernel.c(1760):
OpenSSL: Loop: SSLv3 read finished A<o:p></o:p></p>

<p class=3DMsoNormal>[Fri Jul 17 09:52:29 2009] [debug]
ssl_engine_kernel.c(1756): OpenSSL: Handshake: done<o:p></o:p></p>

<p class=3DMsoNormal>[Fri Jul 17 09:52:29 2009] [info] Connection: =
Client IP:
130.246.76.83, Protocol: TLSv1, Cipher: DHE-RSA-AES256-SHA (256/256 =
bits)<o:p></o:p></p>

<p class=3DMsoNormal>[Fri Jul 17 09:52:29 2009] [debug] =
ssl_engine_io.c(1817):
OpenSSL: read 5/5 bytes from BIO#7d0ad8 [mem: 4a3aaa8] (BIO dump =
follows)<o:p></o:p></p>

<p class=3DMsoNormal>[Fri Jul 17 09:52:29 2009] [debug] =
ssl_engine_io.c(1750):
+------------------------------------------------------------------------=
-+<o:p></o:p></p>

<p class=3DMsoNormal>Dump =
details&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
.....&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
|<o:p></o:p></p>

<p class=3DMsoNormal>[Fri Jul 17 09:52:29 2009] [debug] =
ssl_engine_io.c(1795):
+------------------------------------------------------------------------=
-+<o:p></o:p></p>

<p class=3DMsoNormal>[Fri Jul 17 09:52:29 2009] [debug] =
ssl_engine_io.c(1817):
OpenSSL: read 992/992 bytes from BIO#7d0ad8 [mem: 4a3aaad] (BIO dump =
follows)<o:p></o:p></p>

<p class=3DMsoNormal>[Fri Jul 17 09:52:29 2009] [debug] =
ssl_engine_io.c(1750):
+------------------------------------------------------------------------=
-+<o:p></o:p></p>

<p class=3DMsoNormal>Dump details<o:p></o:p></p>

<p class=3DMsoNormal>&nbsp;[Fri Jul 17 09:52:29 2009] [debug]
ssl_engine_io.c(1795):
+------------------------------------------------------------------------=
-+<o:p></o:p></p>

<p class=3DMsoNormal>[Fri Jul 17 09:52:29 2009] [info] Initial (No.1) =
HTTPS
request received for child 245 (server =
dev.jiscmail.ac.uk:443)<o:p></o:p></p>

<p class=3DMsoNormal>[Fri Jul 17 09:52:35 2009] [debug] =
ssl_engine_io.c(1828):
OpenSSL: I/O error, 5 bytes expected to read on BIO#73e708 [mem: =
4a169e0]<o:p></o:p></p>

<p class=3DMsoNormal>[Fri Jul 17 09:52:35 2009] [info] [client =
130.246.76.83] (OS
10060)A connection attempt failed because the connected party did not =
properly
respond after a period of time, or established connection failed because
connected host has failed to respond.&nbsp; : SSL input filter read =
failed.<o:p></o:p></p>

<p class=3DMsoNormal>[Fri Jul 17 09:52:35 2009] [debug]
ssl_engine_kernel.c(1770): OpenSSL: Write: SSL negotiation finished
successfully<o:p></o:p></p>

<p class=3DMsoNormal><o:p>&nbsp;</o:p></p>

<p class=3DMsoNormal>I&#8217;d be grateful for any pointers in getting =
to the
root of this issue (or ruling out mod_ssl issues). <o:p></o:p></p>

<p class=3DMsoNormal><o:p>&nbsp;</o:p></p>

<p class=3DMsoNormal>Thanks, <o:p></o:p></p>

<p class=3DMsoNormal><o:p>&nbsp;</o:p></p>

<p class=3DMsoNormal>Iain<o:p></o:p></p>

</div>


<br>=
<p>-- =0A<BR>Scanned by iCritical.=0A</p>
<br>=
</body>

</html>

------_=_NextPart_001_01CA06DD.FCE1EBC2--
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [email protected]
Automated List Manager                            [email protected]